SHA1 hash + salt stored instead of password string